In the first step of the Risk Management Process Cycle, 'Why' analysis is used in which action?

• A. Action 1 - Identify Hazards
• B. Action 2 - Assess Risk
• C. Action 3 - List Causes
• D. Action 4 - Implement Controls

Answer: (C)

Why analysis digs into the reasons a hazard exists by repeatedly asking why it occurs. In the risk management cycle, that approach is used when you list the causes of a hazard, because you need to uncover the underlying conditions and chain of events that give rise to the hazard before you can assess risk or choose effective controls. By identifying root causes upfront, you create a solid basis for preventive actions, whereas simply identifying hazards or assessing risk without tracing causes is less actionable. Implementing controls comes after you know what caused the hazard, so listing causes is the step where this 'Why' approach fits best.